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Braking system for vehicles, in particular utility 
vehicles, comprising at least two separate electronic 

braking control circuits 



Description 



The present invention relates to a braking system for 
vehicles in accordance with the precharacterizing 
10 clause of patent claim 1. 



DE 199 04 721 Al discloses an electromechanically 
actuated vehicle braking system which has electrical 
braking control circuits, namely one for the brakes on 

15 the front axle and one for the brakes on the rear axle. 
The two . control circuits each have their own power 
supply and their own electronic control unit, which are 
electrically connected to a brake pedal . The two 
control units operate independently of one another but 

2 0 can communicate with one another and can thereby detect 
faults in a control unit. A fault is then deemed to be 
present when the two control units determine different 
control signals from the same sensor input signals. In 
the event of a fault, the two control units are 

25 deactivated and the brakes are then controlled by 
decentralized control units which are assigned to the 
individual wheels and can perform only simple basic 
functions . 



3 0 Modern utility vehicle braking systems have a dual- 
circuit pneumatic control system and an electronic 
braking control system, thus making it possible to 
transmit signals in a more rapid manner and improving 
the response behavior of the braking system. The costs 

35 of electromechanical control components are also 
frequently lower than the costs of pneumatic control 
components. Another advantage is the lower outlay on 
installation. Electropneumatic braking systems, in 
particular, in which the braking force is applied using 



WO 2004/098967 ' PCT/EP2004/004810 

- 2 - 

compressed air but braking is controlled electronically 
are customary nowadays. A fundamental "quality 
criterion" of electrical or electronic braking control 
systems is their reliability or fail-safety. 

5 

It is an object of the present invention to provide a 
braking system which can be activated electrically, has 
increased fail -safety or reliability and can, in 
particular, also carry out higher functions such as 
10 ABS, ASR, EBS etc. 

This object is achieved by means of the features of 
patent claim 1. Advantageous refinements and 
developments of the invention can be gathered from the 
15 subclaims. 

The basic principle of the invention resides in a 
braking system comprising at least two or more 
electrical or electronic braking control systems, 

2 0 individual brake actuators or groups of brake actuators 

being assigned to different braking control systems, to 
be precise in such a manner that there are brake 
actuators which can be activated by a plurality of 
braking control systems . 

25 

In the event of a braking control system failing or 
developing a fault, control at "critical" wheels is 
immediately assumed by another braking control system. 

3 0 The individual braking control systems are preferably 

isolated from one another in such a manner that a fault 
in one of the braking control systems does not affect 
the other braking control system (s) . The individual 
braking control systems are preferably DC- isolated from 
3 5 one another. 

Despite being isolated, the individual braking control 
systems preferably communicate with one another in 
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order to make it possible for another braking control 
system to rapidly assume the braking control function, 
in order to coordinate braking activities of brake 
actuators which are activated by different braking 
5 control systems and in order to exchange parameters 
which have been learnt. 



The brake actuators which are activated by the 
electronic braking control systems are preferably 

10 "pneumatic brake actuators", that is to say in which 
the braking force is applied pneumatically. This is 
because, in the case of electrically actuated brake 
actuators which are currently available, it is not yet 
possible to build up a satisfactory or sufficient 

15 braking force. 

The braking system is preferably designed in such a 
manner that it is possible to "easily" change over from 
the electropneumatic brake components used nowadays to 
20 purely electrically controlled components. 

According to one development of the invention, the 
control circuits each have their own electronic control 
unit and their own power supply. The electrical control 
2 5 circuits activate electropneumatic pressure regulation 
modules which are supplied with brake pressure by at 
least two pneumatic supply circuits. 

The brake circuits may be divided between individual 
30 vehicle brakes in different ways. 

One option is to assign a brake circuit to a vehicle 
axle or group of axles. Each brake circuit preferably 
has its own control circuit and its own supply circuit, 
35 that is to say one supply circuit and one control 
circuit are then exclusively assigned to one brake 
circuit . 
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Another option is to provide a first brake circuit, 
which has the function of a service brake circuit, and 
a second brake circuit, which assumes the function of 
the service brake circuit, the braking operations being 
alternately divided equally between the brake circuits. 
The non-active brake circuit is respectively tested for 
faults in this state. In the event of a brake circuit 
failing, the functions are immediately assumed and 
carried out by the other brake circuit, further 
changeovers being effected but a faulty function being 
carried out by a redundant fault -free function. Each 
brake circuit is respectively provided with its own 
electronic control unit, said electronic control units 
being able to communicate with one another via a 
communications line in such a manner that they are DC- 
isolated. The service brake circuit preferably has two 
separate subsupply circuits which are each connected to 
their own associated pressure -medium store. The first 
subsupply circuit is provided, for example, for the 
purpose of applying pressure to pressure regulation 
modules on a front axle, and the other subsupply 
circuit is provided for the purpose of applying 
pressure to pressure regulation modules on a rear axle. 
The second brake circuit likewise has its own pressure- 
medium store . 

The invention is explained in more detail below in 
connection with the drawing, in which: 

fig. 1 shows a first exemplary embodiment in 

accordance with the invention; 
fig. 2 shows a second exemplary embodiment in 

accordance with the invention; 
fig. 3 shows a basic circuit diagram of the power 

supply system for the two braking control 

circuits ; 

fig. 4 shows a schematic exemplary embodiment of a 

parking brake valve; and 
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fig. 5 shows a schematic illustration of networked 

electronic control systems. 

Fig. 1 shows a schematic illustration of an 
5 electropneumatic vehicle braking system. Front wheels 
1, 2 are each assigned a brake cylinder 3, 4, a brake 
lining wear sensor 5, 6 and a wheel speed sensor 7, 8. 
Brake pressure is applied to the brake cylinders 3, 4 
by associated electropneumatic pressure regulation 

10 modules 11, 12 (EPM) via pneumatic lines 9, 10. The two 
pressure regulation modules 11, 12 are connected in 
this case, via a common supply line 13, to a first 
compressed-air store 14 which is assigned to the front 
axle. The brake lining wear sensors 5, 6 and the wheel 

15 speed sensors 7, 8 are each connected to signal inputs 
of the pressure regulation modules 11, 12 via 
electrical lines 15, 16. The pressure regulation 
modules 11, 12 also each have an electrical control 
input 17, 18, the latter being connected to a first 

20 electronic control unit 20 via electrical lines 19 
which are shown only schematically in this case. The 
electronic control unit 20 thus controls the braking of 
the front wheel brakes in this case. 



2 5 Rear wheels 21, 2 2 are each assigned a spring brake 
cylinder 23, 24, the latter being connected, via 
pneumatic brake lines 25, 26, to associated pressure 
regulation modules 27, 28 which are connected to a 
second compressed-air store 30 via a supply line 29. 

30 The spring brake cylinders 23, 24 are also connected to 
an electrically activatable locking valve 32 for a 
common compressed-air line 31. 

Like the front axle, the pressure regulation modules 
35 27, 28 are connected to associated brake lining wear 
sensors 35, 36 and wheel speed sensors 37, 38 via 
electrical lines 33, 34. The pressure regulation 
modules 27, 28 have control inputs 39, 40 which are 
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connected, via electrical lines 41 which are shown only 
schematically in this case, to a second electronic 
control unit 42 which activates the brakes of the 
vehicle rear axle in this case. 

5 

The parking brake valve 32 which is shown in detail in 
fig. 4 and is described therein is connected to the 
first electronic control unit 20 via an electrical 
control line 43 and to the second electronic control 

10 unit 42 via an electrical control line 44 . A pneumatic 
line 46 also leads from the parking brake valve 32 to a 
third pressure -medium store 4 7 via a nonreturn valve 
45. The three pressure -medium stores 14, 3 0 and 4 7 are 
each connected to a common pressure distribution device 

15 48 which is fed by a pressure-generating device 49 
(compressor) . 

The two electronic control units 20, 42 are connected 
to an associated bus VehComl and VehCom2 , respectively, 

20 via electrical lines 50, 51. These bus lines are used 
to connect the vehicle braking system to other 
electrical or electronic vehicle systems. In 
particular, a braking request signal which is 
prescribed by the driver using the brake pedal is 

25 supplied to the electronic control units 20, 42 via 
these buses . 

The electronic control unit 2 0 is connected to a 
positive line VI via an electrical line 52. 

30 Accordingly, the electronic control unit 42 is 
connected to a second positive line V2 via an 
electrical line 53 . The positive line VI is connected 
to the positive terminal of a first battery 54 and the 
second positive line V2 is connected to the positive 

35 terminal of a second battery 55. The positive terminals 
of the two batteries 54, 55 are connected to one 
another via a DC- isolation device 56, which will be 
explained in even more detail in connection with fig. 
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3 . 

The positive terminal of the battery 54 is also 
connected to an AC generator (dynamo) via a rectifier 
5 .57 . 

The two electronic control units 20, 42 are also 
connected to one another via a communications line 58 
and a DC-isolation device 59. 

10 

In the case of the braking system shown in fig. 1, a 
"dual electronic control system" having two separate 
power supply devices is provided for the purpose of 
improving the fail -safety. Even though the two 
15 electronic control circuits are DC-isolated from one 
another, the two batteries 54, 55 can have a common 
ground connect ion . 

The braking request signal from the driver is supplied 
20 to the two electronic control units using electrical 
brake pedal signals. Mechanical parts have a fail-safe 
design. By contrast, electronic components are 
duplicated and are mechanically isolated and DC- 
isolated from one another. 

25 

In fig. 1, the "division" of the electronic control 
system corresponds to the "division" of the pneumatic 
supply circuits, that is to say the supply and control 
circuits are each divided between the front and rear 
3 0 axles. 

Fig. 2 shows a brake circuit which has been improved 
further and in which all of the vehicle brakes can be 
actuated even in the event of a fault in the "primary 
35 brake circuit". 

Fig . 2 shows a further development of the braking 
system shown in fig. 1. In this case too, the braking 
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system has two brake circuits, namely a first brake 
circuit as the service brake circuit (primary circuit) , 
which controls the braking of all wheels of the vehicle 
and of a trailer vehicle (which may be present) when 
5 the braking system is intact, and a second brake 
circuit (secondary circuit) , which controls the braking 
of all wheels of the vehicle and of a trailer vehicle 
(which may be present) if the service brake circuit, 
that is to say the first brake circuit, has failed. 

10 

In this case, the first brake circuit is formed 
primarily by the pressure regulation modules 11, 12 on 
the front axle and the pressure regulation modules 27, 
28 on the rear axle. Analogously to fig. 1, the 
15 pressure regulation modules 11, 12 are supplied with 
storage pressure by the first pressure-medium vessel 14 
via a pneumatic line 13. The second pressure -medium 
vessel 30 supplies the pressure regulation modules 27, 
28 via the pneumatic line 29. 

20 

The pressure regulation modules 11, 12 are also 
connected to a control output 60 of a foot brake valve 
61 via a pneumatic control line 60 1 . The pneumatic 
control line 60' is likewise connected to the first 
25 pressure -medium vessel 14 via the foot brake valve 61. 

The second pressure -medium vessel 30 is connected, via 
the foot brake valve 61, to a control output 62 of the 
foot brake valve 61, to which control inputs 64, 65 of 
30 pressure regulation modules 66, 67 of the second brake 
circuit are connected via a control line 62'. The 
pressure regulation modules 66, 67 of the second brake 
circuit are also connected to the third pressure -medium 
vessel 47 via a pneumatic supply line 68, 69. 

35 

The pressure regulation modules 27, 2 8 of the service 
brake circuit on the rear axle are likewise connected 
to the pneumatic control output 6 0 of the foot brake 
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valve 61 via a pneumatic control line 70. 

Like the front axle, two further pressure regulation 
modules 71, 72 of the second brake circuit are also 
5 provided on the rear axle, said pressure regulation 
modules being supplied with compressed air by the third 
pressure -medium vessel 47 via the pneumatic supply line 
68, 69 and likewise being connected to the pneumatic 
control output 62 of the foot brake valve 61 via a 

10 pneumatic control line 63. The pressure regulation 
modules 66, 67, 71, 72 of the second brake circuit are 
connected to the second electronic control unit 42 via 
electrical connecting lines 73. It goes without saying 
that it is possible to assign the pneumatic control 

15 outputs 60, 62 of the foot brake valve 61 to the 
pressure regulation modules 11, 12, 27, 28, 66, 67, 71, 
72 in another manner. 

Analogously to this, the pressure regulation modules 
20 11, 12, 27, 28 of the service brake circuit are 
connected to the first electronic control unit 20 via 
an electrical line 74. 

The pressure regulation modules 11, 67 and 12, 66 are 

2 5 each connected to the brake cylinders 3, 4 via an 

associated high-pressure selection valve 75, 76 and the 
pneumatic lines 9, 10. 

Analogously to fig. 1, the brake lining wear sensors 5, 

3 0 6 and the wheel speed sensors 7, 8 are connected to the 

pressure regulation modules 11, 12 of the service brake 
circuit. In addition to this, a second wheel speed 
sensor 77, 78 is respectively provided in the exemplary 
embodiment shown in fig. 2, said wheel speed sensors 
3 5 being connected to the pressure regulation modules 67 
and 66 of the second brake circuit. 



Analogously to this, wheel speed sensors 79, 80 and 
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brake lining wear sensors 35, 36, which are connected 
to the pressure regulation modules 71, 72 of the second 
brake circuit, are also provided on the rear axle in 
addition to the wheel speed sensors 37, 38 which are 
5 connected to the pressure regulation modules 27, 28 of 
the service brake circuit . 

The foot brake valve 61 also has electrical control 
outputs which are connected, on the one hand, to the 

10 electronic control unit 20 via an electrical line 81 
and, on the other hand, to the electronic control unit 
42 via an electrical line 82. Analogously to fig. 1, 
control inputs of the parking brake valve 32 (which 
additionally has a further manual control input 83 in 

15 this case) are connected to the electronic control unit 
20 and to the electronic control unit 42. 

In addition to fig. 1, a further pressure regulation 
module 84 which is connected to a trailer control valve 

20 85 via a pneumatic control line are provided in fig. 2. 
The pressure regulation module 84 is supplied with 
storage pressure by the third pressure-medium vessel 47 
via the storage line 69 and is connected to the second 
electronic control unit 42 via an electrical control 

25 line 86. A pneumatic control line 87 for the parking 
brake of a trailer vehicle is also provided between the 
parking brake valve 32 and the trailer control valve 
85. The trailer control valve 85 is likewise connected 
to the first electronic control unit 20 via an 

30 electrical control line 88. 

Analogously to fig. 1, the two electronic control units 
20, 42 are connected to the positive terminals VI and 
V2 via the lines 52, 53 and to bus lines VehComl and 
35 VehCom2 via the lines 50, 51. Connecting lines 89, 90 
to TrComl and TrCom2 connections are additionally 
provided in this case, said connections leading to a 
trailer. Power supply via the batteries 54, 55 
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corresponds to fig. 1. In contrast to fig. 1, the 
pressure distribution device 48 is likewise connected 
to the VehComl bus here, can isolate a faulty 
compressed-air supply circuit and maintains the 
5 requisite system pressure for all of the other 
circuits . 

Like fig. 1, the two electronic control units 20, 42 
are connected to one another via the electrical line 58 
10 and the DC-isolation device 59. This connection 
prevents an actuator, for example, being activated by 
different control devices at the same time. 

Analogously to the front axle, the pressure regulation 
15 modules 27, 71 and 28, 72 are also each connected, on 
the rear axle, to inputs of the spring brake cylinders 
23, 24 via a high-pressure selection valve 91, 92. 

The high-pressure selection valves (high select) 75, 

2 0 76, 91, 92 ensure that the higher of the two brake 

pressures of the connected brake circuits is 
respectively transmitted to the brake cylinders. During 
normal operation, the service braking system 
"overrides" the second braking system, the pressures in 

25 the second brake circuit being somewhat lower than in 
the service brake circuit. This ensures reliable 
pressure control and makes it possible for the second 
brake circuit to check its own "operational 
capability", for example by measuring the pressure at 

30 the outputs of the pressure regulation modules 66, 67 
and 71, 72 of the second brake circuit, that is to say 
upstream of the high-pressure selection valves 75, 76, 
91, 92. 

3 5 The valve components are now present "singly" from the 

output of the high-pressure selection valves 75, 76, 
91, 92. They are accordingly of failsafe design. 
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The uppermost level of the electronic control system of 
the braking system is implemented using the two 
electronic control units 20, 42 (main electronic 
control unit and second electronic control unit) . The 
5 two electronic control units have two communications 
connections 58, 59 which are independent of one another 
and are DC- isolated from one another. These "connecting 
lines" can be used to carry out plausibility checks on 
the two independent circuits. "Learnt" and 
10 instantaneous or measured braking parameters can also 
be exchanged. The "main ECU" (electronic control unit 
20) controls all of the vehicle brakes during normal 
operation and also if the second system has developed a 
fault or has failed. 

15 

In the event of the main braking system failing, the 
second system controls braking. The main system has a 
pneumatic pressure supply via the pressure -medium store 
14 for the front axle and via the pressure -medium store 
20 30 for the rear axle and controls the pressures using 
the associated pressure regulation modules 11, 12, 27, 
28. 

In order to increase reliability, two wheel speed 
2 5 sensors are provided at each wheel, one being assigned 
to the respective pressure regulation module of the 
service brake circuit and the other being assigned to 
the associated pressure regulation module of the second 
brake circuit. 

30 

The foot brake valve 61 is connected to the two ECUs, 
that is to say to the electronic control units 20, 42, 
with the result that DC-isolation is ensured, thus 
enabling plausibility checks. 

35 

Each ECU has a data connection to its associated 
superordinate control unit, from which external braking 
requests can be accepted. These data connections must, 
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of course, be DC- isolated from the two braking control 
circuits . 

The parking brake is activated exclusively 
5 electronically by the two independent ECUs and is 
directly activated electrically by the driver, to be 
precise in the following manner. Electrical actuation 
of the parking brake by the driver precedes electronic 
control by the two ECUs. However, the parking brake is 
10 released only when there are release signals from the 
ECUs and from the driver. 

Fig. 3 shows an enlarged illustration of the power 
supply system for the braking control system shown in 

15 fig. 2. A generator 93 (dynamo) generates a voltage and 
is connected to the positive terminal of the battery 54 
and to the DC-isolation device 56 (supply duplicator 
unit) . The positive terminal of the battery 55 is 
likewise connected to the DC- isolation device. The 

20 positive terminals of the two batteries 54, 55 are thus 
DC-isolated. The DC-isolation may be realized, for 
example, using a converter with electromagnetic 
transmission . 

25 The negative terminals of the two batteries 54, 55 and 
the generator 93 each have a common ground connection 
(GND) . The potential VI can be tapped off from the 
positive terminal of the battery 54 and the potential 
V2 can be tapped off from the positive terminal of the 

30 battery 55. The isolation device 56 also has electronic 
monitoring units 94, 95 which are connected to the bus 
lines VehComl and VehCom2 . The electronic monitoring 
units 94, 95 monitor and control the charging and 
discharging operations, to be precise in such a manner 

35 that the lives of the batteries are optimized. 

Since not all of the electrical systems in a vehicle 
are relevant to safety, not all of the systems need to 
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be "duplicated" either. The power supply system is 
therefore of "asymmetrical " design. 

The main system, that is to say, for example, the 
5 battery 54, supplies power to all of the main loads, 
for example starter, lights, drive controller, the 
primary electronic braking control circuit, the primary 
electronic steering control circuit etc. The secondary 
system, that is to say the battery 55, supplies power 
10 to the "subordinate" back-up components of all the 
safety-relevant systems, that is to say the electronic 
back-up braking control circuit and an electronic back- 
up steering control circuit. 

♦ - V - 

15 On account of the "asymmetry", the second battery may 
have a smaller capacity than the first, and another 
type of battery may also be used. The batteries 54, 55 
are thus matched to one another in terms of size, 
capacity, charging and discharging curves etc. 

20 

The AC generator 93 (dynamo) charges the first battery 
54 and - in a DC- isolated manner - also the second 
"back-up battery" 55. In the event of a fault in a 
supply circuit, the "supply duplicator unit" 56 and the 
25 electronic monitoring units ensure the integrity of the 
other circuit . 

Optimum use of the batteries requires charging and 
discharging methods which are matched to the batteries, 

30 this being monitored by the electronic control devices 
94, 95. The charging and discharging operations are 
thus intended to be carried out, as far as possible, in 
accordance with prescribed "charging and discharging 
curves". The electronic control devices 94, 94 are thus 

35 used as "intelligent charging and discharging control 
devices " . 

Since, in the case of fully electronic control of 
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safety-relevant systems, the state of the batteries is 
a very important item of information, the isolation 
device 56 has two DC- isolated data connections (not 
shown) via which battery state signals are transmitted. 

5 

Fig. 4 shows a schematic exemplary embodiment of the 
parking brake valve 32. It comprises two function 
valves FV1, FV2 , two locking valves LV1 , LV2 , two 
pressure sensors PS1, PS2 and two trailer check valves 

10 TCI, TC2 . The valves FV1 and LV2 switch the upper air 
path of the parking brake valve 32, and the valves FV2 
and LV1 switch the lower air path. The valves FV1 and 
LV1 are controlled by the first electronic control unit 
20, and the valves FV2 and LV2 are controlled by the 

15 electronic control unit 42 . Normally, the function 
valves FV1, FV2 control the functioning of the parking 
brake. In the event of a fault in a function valve (for 
example FV2) , the associated locking valve LV1 will 
block the faulty air path. 

20 

A relay valve RV is a power valve and is controlled by 
the valves FV1 , FV2 , LV1 , LV2 since the latter are not 
capable of actuating the spring brake cylinders 23, 24 
rapidly enough. 

25 

The trailer check valves TCI, TC2 are responsible for 
checking the spring brake action. 

If the function valve FV1 or its controller has a 
30 fault, the locking valve LV2 is actuated and the upper 
air path is thus blocked. In this case, correct 
functioning is still ensured by the function valve FV2 
and the locking valve LV1 . 

35 If the locking valve LV2 or its controller has a fault, 
the two function valves FV1 , FV2 must still be 
activated, and correct functioning is thus still 
maintained . 
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In order to detect faults in the parking brake system, 
use is made of two pressure sensors PS1, PS2 which are 
interrogated in the switching sequences of the function 
5 valves FV1 , FV2 and locking valves LV1, LV2 . 

In the event of all the electrical supply voltages 
failing, the parking brake valve 3 2 will brake. 

10 Fig. 5 shows a schematic illustration of networked 
electronic control systems having multiple redundancy 
levels. Only control systems ECU__1 to ECU_16 with their 
supply lines and communications connections are shown. 
The control systems are arranged in system groups. 

15 ECU_1 to ECU_5 are the basic systems, for example 
brake, steering, vehicle dynamics, engine control, 
transmission control etc. These systems are supplied by 
a power generator G via a supply line V_l . The 
associated energy store is a battery BATT_1 . The next 

20 group is formed by the control systems ECU_6 to ECU_8 , 
which group is also supplied by the power generator G. 
However, the supply line contains a transducer TR_1 , to 
which a supply line V_2 is connected. The group of 
control systems ECU_6 to ECU_8 are the most saf ety- 

25 critical redundant pairs of the control systems ECU__1 
to ECU_5 (for example brake 2, steering 2, vehicle 
dynamics 2) . 

The communications lines of the control systems are 
30 also isolated from one another by transducers. A 
communications connection thus exists, for example, 
between the control systems ECU__1 to ECU_8 by virtue of 
the communications line C0M_1 which is connected to a 
communications line COM_2 of the control systems ECU_6 
35 to ECU_8 by the transducer TR_1 . 

Fig. 5 shows quadruple redundancy in which four 
transducers TR1 to TR4 are used. 
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The position of the control systems ECU_15 to ECU_16 
shows another possible way of using transducers. These 
control systems are connected to one another by means 
of a supply line V_5 and a communications line COM_5 
and are connected to the transducer TR_4 . The 
transducer TR_4 forms the connection to the supply line 
V_3 and to the communications line COM_3 which are, in 
turn, connected to the supply line V_l and to the 
communications line COM__l by means of a further 
transducer TR_2 . 

The transducers TR_1 to TR_4 form DC-isolation devices 
between the various redundancy levels. 
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Patent Claims 



1. A braking system for vehicles, in particular 
5 utility vehicles, comprising at least one first 

brake circuit and at least one second brake 
circuit, it being possible to electrically 
activate said brake circuits via a foot brake 
valve (61) , and the two brake circuits each having 

10 an electrical control circuit, which respectively 

has an electronic control unit (20, 42) and its 
own power supply device (54, 55), and brake 
actuating devices (11, 12, 27, 28, 66, 67, 71, 72) 
which can be activated by the electronic control 

15 units (20, 42) , 

characterized In -that 

at least one brake actuating device (11, 12, 27, 
28, 66, 67, 71, 72) can be activated by more than 
one electronic control unit (20, 42). 



20 



25 



The braking system as claimed in claim 1, 
characterized in that 

the electrical control circuits are DC- isolated 
from one another. 



3. The braking system as claimed in claim 1 or 2 , 
characterized in that 

the electronic control unit (20) of the first 
brake circuit is connected to the electronic 
30 control unit (42) of the second brake circuit via 

a communications line (58) , the communications 
line (58) having a device (59) for the DC- 
isolation of the two control circuits. 



35 4. The braking system as claimed in one of claims 1 

to 3, characterized in that 

the two control circuits have a common ground 
connection (GND) . 
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5. The braking system as claimed in one of claims 1 
to 4, characterized in that 

the electronic control units (20, 42) are 
connected to other electrical or electronic 
vehicle systems in such a manner that they are DC- 
isolated. 

6 . The braking system as claimed in one of claims 1 
to 5, characterized in that 

the foot brake valve (61) has two electrical 
braking transmitter devices which are each 
connected to the electronic control units (20, 42) 
in such a manner that they are DC- isolated. 

7 . The braking system as claimed in one of claims 1 
to 6, characterized in that 

the two power supply devices are batteries (54, 

55) , the second battery (55) being connected to 

■ 

the first battery (54) via a DC-isolation device 
(56) and being able to be charged via the first 
battery (54) . 

8. The braking system as claimed in claim 7, 
characterized in that 

the DC-isolation device (56) has an electronic 
monitoring unit (94, 95) which monitors the states 
of charge of the batteries (54, 55), it being 
possible to switch the electronic monitoring unit 
(94, 95) to a charge reversal state in which the 
first battery (54) is charged by the second 
battery (55) , and 

in that the electronic monitoring unit (94, 95) 
uses a generator (93) to control the charging of 
the first battery (54) and/or of the second 
battery (55) . 

9. The braking system as claimed in claim 8, 
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characterized in that 

the electronic monitoring unit (94, 95) can be 
connected to other electrical or electronic 
vehicle systems, such that it is DC-isolated, in 
order to transmit the state of charge of the 
batteries (54, 55). 

10 . The braking system as claimed in one of claims 1 
to 9, characterized in that 

the brake actuating devices are electropneumatic 

pressure regulation modules (11, 12, 27, 28, 66, 
67, 71, 72) , and 

in that provision is made of at least two separate 

pneumatic supply circuits for supplying the 

pressure regulation modules (11, 12, 27, 28, 66, 
67, 71, 72) with brake pressure. 

11. The braking system as claimed in one of claims 1 
to 10, characterized in that 

the supply circuits are each assigned to a vehicle 
axle or a group of axles. 

12 . The braking system as claimed in one of claims 1 

to 11, characterized in that 

a brake circuit is respectively assigned precisely 
one control circuit and precisely one supply 
circuit . 

13 . The braking system as claimed in one of claims 1 

to 12, characterized in that 

the first brake circuit is assigned to the brakes 
on the front axle and the second brake circuit is 
assigned to the brakes on the rear axle. 

14 . The braking system as claimed in one of claims 1 

to 12, characterized in that 

the first brake circuit is a service brake circuit 
and the second brake circuit assumes the function 



WO 2004/098967 PCT/EP2004/004810 

- 21 - 

of the first brake circuit in regular rotation 
under the control of the electronic control units 

(20, 42), the non-active brake circuit 
respectively being checked, and the pressure 
regulation modules (11, 12, 27, 28, 66, 67, 71, 
72) each being connected to the service brake 
circuit and to the emergency brake circuit via a 
high-pressure selection valve (75, 76, 91, 92), 
the high-pressure selection valve (75, 76, 91, 92) 
transmitting the higher of the brake pressures 

(which are provided by the two brake circuits) to 
the associated pressure regulation module (11, 12, 
27, 28, 66, 67, 71, 72) . 

15. The braking system as claimed in one of claims 1 
to 14, characterized in that 

a pressure regulation module (11, 12, 27, 28) of 
the service brake circuit and a pressure 
regulation module (66, 67, 71, 72) of the 
emergency brake circuit are respectively connected 
upstream of each of the high-pressure selection 
valves (75, 76, 91, 92) . 

16. The braking system as claimed in one of claims 1 
to 15, characterized in that 

the first supply circuit is formed by two 
subsupply circuits which are each connected to 
their own associated pressure-medium store (14, 
30) , the first subsupply circuit being assigned to 
a first group of pressure regulation modules (11, 
12) of the first brake circuit and the second 
subsupply circuit being assigned to a second group 
of pressure regulation modules (27, 28) of the 
first brake circuit. 



17. The braking system as claimed in claim 16, 
characterized in that 

the two subsupply circuits are each assigned to an 
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axle or group of axles. 

18. The braking system as claimed in one of claims 14 
to 17, characterized in that 

the second brake circuit has its own pressure- 
medium store (30) , and in that brake pressure from 
the second brake circuit can be applied to all of 
the high-pressure selection valves (75, 76, 91, 
92) via associated pressure regulation modules 
(66, 61, 11, 12) of the second brake circuit. 

19. The braking system as claimed in claim 18, 
characterized in that 

a parking valve (32) and a trailer control valve 
(84, 85) are likewise connected to the pressure- 
medium store (47) of the second brake circuit. 

20. The braking system as claimed in one of claims 14 
to 19, characterized in that 

a respective wheel speed sensor (7, 8, 37, 38, 77- 
80) is connected to each pressure regulation 
module (11, 12, 27, 28, 66, 61, 71, 72), each 
wheel (1, 2, 21, 22) respectively being assigned 
two wheel speed sensors (7, 77; 8, 78; 37, 79; 38, 
80) . 

21. The braking system as claimed in either of claims 
19 and 20, characterized in that 

the parking valve (32) is electrically connected 
to each of the two electronic control units (20, 
42) . 

22. The braking system as claimed in one of claims 19 
to 21, characterized in that 

the trailer control valve (85) can be activated by 
the two electronic control units (20, 42), 
provision being made of a logic device which 
switches through only that control signal which 



WO 2004/098967 PCT/EP2004/004810 

- 23 - 

results in the trailer vehicle being decelerated 
to a greater extent. 

23. The braking system as claimed in one of claims 1 
to 22, characterized in that, 

under the control of the electronic control units 
(2 0, 42) , the second brake circuit assumes the 
function of the first brake circuit if the latter 
fails and the first brake circuit assumes the 
function of the second brake circuit if the latter 
fails . 



24. The braking system as claimed in one of claims 1 
to 23, characterized in that, 

in the event of one or more pneumatic circuits 
failing, a pressure distribution device (48) for 
charging and isolating the pneumatic circuits 
still allows the normal supply pressure in the 
fault-free circuits, and an electronic 

communications system VehComl is connected. 

25. The braking system as claimed in one of claims 1 
to 24, characterized in that , 

the electronic control units of brake circuits are 
connected to one another via communications lines, 
the communications lines having devices for the 
DC-isolation of the control circuits. 

26. The braking system as claimed in one of claims 1 
to 25, characterized in that 

the power supply devices of the control circuits 
are batteries, the batteries being connected to 
one another and being able to be charged via DC- 
isolation devices . 
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The braking system as claimed in one of claims 1 
to 26, characterized in that 

the parking brake valve (32) has electropneumat ic 
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File reference: PCT/EP2004/004810 

Braking system for vehicles, in particular utility 
5 vehicles, comprising at least two separate electronic 

braking control circuits 

Description 

10 The present invention relates to a braking system for 
vehicles in accordance with the precharacterizing 
clause of patent claim 1. 

DE 199 15 253 Al discloses a braking system for 
15 vehicles, said braking system having two brake circuits 
and containing, in a central unit, two microcomputers 
which are each supplied with power from separate power 
sources. The two microcomputers activate a plurality of 
brake actuating devices for individual wheel brakes 
20 using two separate redundant bus systems. This 
activation is always effected in a parallel manner 
using the two bus systems . Measuring devices which are 
coupled to a brake pedal are provided in order to 
activate the two microcomputers. 

25 

DE 35 02 04 9 A describes a brake pressure control 
device for a motor vehicle having a foot brake valve 
which transmits signals to an electronic control unit 
which, for its part, activates pressure-regulating 
30 valves for wheel brakes. 

WO 01/62569 A shows an electronic braking control 
system having three power sources for the power supply. 
The power sources are decoupled from one another by 
3 5 diodes. 

DE 196 40 148 A shows an electronic braking system 
having a plurality of vehicle modules which communicate 
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via a data bus. Individual modules are DC-isolated from 
one another by optocouplers . 

DE 195 09 150 A shows a vehicle braking system having 
5 at least two brake circuits, said braking system 
respectively having a control unit which is controlled 
microprocessors which are independent of one another. A 
monitoring computer monitors the two other control 
units . 

10 

DE 32 04 185 A again shows a pressure-medium braking 
system having a foot brake valve which electrically 
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